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Fragile Watermarking Using Finite Field Trigonometrical Transforms 
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Abstract 

Fragile digital watermarking has been applied for authentication and alteration detection in images. Utilizing the cosine and Hartley 
transforms over finite fields, a new transform domain fragile watermarking scheme is introduced. A watermark is embedded into a host 
image via a blockwise application of two-dimensional finite field cosine or Hartley transforms. Additionally, the considered finite field 
transforms are adjusted to be number theoretic transforms, appropriate for error-free calculation. The employed technique can provide 
invisible fragile watermarking for authentication systems with tamper location capability. It is shown that the choice of the finite field 
characteristic is pivotal to obtain perceptually invisible watermarked images. It is also shown that the generated watermarked images 
can be used as publicly available signature data for authentication purposes. 
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1 Introduction 

Finite field transforms link two sequences of data according to a 
general pair of relationships given by 

AT—1 

V k ='£ Vi K(i,k, C), k = 0,l,...,N — 1, (1) 

i =0 

N-l 

v i ='£v k K-\i,k,0, i = 0,l,...,N — 1, (2) 

k=0 

where v = (vo Vi • • • vy-1) and V = (Vo Vj • • • Vy-1) are data vec¬ 
tors of length N with elements defined over a certain Galois field; 

and K 1 (■.■, ■) are the forward and inverse transforma¬ 
tion kernels, respectively; and £ is a fixed element of the given 
Galois field Q). 

In this framework, the concept of number theoretic transforms 
arises. If, for each vector v with components defined over GF (p), 
its associated transform pair V has also components defined over 
GF(/?), then the transformation is said to be a number theoretic 
transform (NTT) 0 . Number theoretic transforms have been 
subject of much interest, because of their capability of exact cal¬ 
culation. Being all operations required by an NTT performed in 
a finite field, there are no errors due to rounding or truncation. 
Consequently, in principle, the possibility of error-propagation 
is eliminated. 
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The first proposed NTT, due to Pollard 0, is a Fourier- 
like transform often called finite field Fourier transform (FFFT). 
Since its introduction, the FFFT was submitted to several gener¬ 
alizations 0a and further methods were devised ll6ll7ll8ll9l[T0l 

mOUElE). 

Standard number theoretic transforms have been employed in 
different frameworks, such as: (i) fast calculation of convolutions 
and correlations QUEUE); (ii) algebraic coding theory 03; 
and (iii) very large number multiplication ED- In the past years, 
it was observed a broadening of the NTT range of applications. 
Other topics of research have also been benefited from the uti¬ 
lization of NTT approaches. Just to illustrate some of them, 
one could cite; (i) solving Toeplitz system of equations 03 ; 
(ii) speech coding problems ||20l ; and (iii) fast matrix multipli¬ 
cation ED- Two-dimensional number theoretic transforms were 
subject to a comprehensive exposition in l22l . Additionally, im¬ 
age processing problems, involving motion estimation |23) and 
geometrical rotation ED, were also addressed. In |25), Tamori et 
al. suggested the use of the Fourier-based NTT to provide a frag¬ 
ile watermarking scheme. In the current work, this specific tech¬ 
nique is denominated Tamori-Aoki-Yamamoto scheme. 

Generally, a watermarking operation consists of encapsulat¬ 
ing a given information (e.g., an image) into raw image data. 
The former is the watermark, the latter is the image to be water¬ 
marked. Frequently, the watermark is required to be perceptu¬ 
ally transparent. Invisible watermarks are typically categorized 
in two different models: robust or fragile watermarking. De¬ 
pending on the purpose of the watermarking, robust or fragile 
schemes are chosen. Robust watermarks are designed to en¬ 
dure a variety of data manipulations, such as adjustments of the 
compression ratio, filtering, cropping, or scaling. Therefore, ro¬ 
bust watermarks are suitable in situations involving misappropri¬ 
ation of data, such as ownership assertion and copyright enforce¬ 
ment 126) . Despite of this, because of its robustness, this class of 
watermarking methodology is in part ineffectual for recognizing 
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tampering. 

On the other hand, fragile watermarking schemes can furnish 
the necessary tools for authentication and integrity attestation. In 
fact, fragile watermarking techniques are supposed to detect tam¬ 
pering and determine the identity of the data originator with high 
probability ES1I22- However, fragile watermarks are not ade¬ 
quate in situations that require copyright verification. Since min¬ 
imal image alterations are expected to promptly damage frag¬ 
ile watermarks, fragile watermarking can not properly deal with 
misappropriation issues. 

Several fragile watermarking techniques have been proposed, 
usually, with the purpose of still image authentication. A 
glimpse of the current investigations embraces works on simul¬ 
taneously robust and fragile systems 1281 ; authentication meth¬ 
ods for JPEG images (29l l30l : protection of video communi¬ 
cations ED; and tamper detection with the aid of wavelet de¬ 
compositions (32ll33l . Some non-conventional applications have 
also been reported, such as blind estimation of the quality of 
communication links ll34ll . and image quality assessment (35). 

In account of the above, the number theoretic transforms arise 
as a natural tool to provide fragile watermarking methods. Since 
(i) the NTT domain has no physical meaning, such as harmonic 
content, and (ii) the concept of energy over a finite field is not 
clear, any perturbation on a data sequence produces a dramatic 
alteration of its associated number theoretic transformed se¬ 
quence. Moreover, all computations required by an NTT are in¬ 
teger modular arithmetic, which can be efficiently implemented. 

The aim of this paper is twofold. First, an amplification 
of the Tamori-Aoki-Yamamoto fragile watermarking scheme is 
sought (25]. To explore this line, finite field trigonometry and 
trigonometrical transforms are employed ei eb hud ei na. 
Second, a new mode of operation for the discussed watermark¬ 
ing scheme is suggested. The original method by Tamori et al¬ 
ls categorized as a private watermarking system. In the present 
study, the proposal of a signature method with the ability of tam¬ 
per detection and location is made. 

The rest of the paper is organized as follows. Section [2]is de¬ 
voted to the finite field trigonometry theory. Central aspects of 
finite field transforms are also outlined. Mainly, the focus is di¬ 
rected to the finite field cosine transform (FFCT) and to the finite 
field Hartley transform (FFHT). In Section [3} the fragile water¬ 
marking technique proposed in l25l is described. Then, a new 
modus operandi for the discussed watermarking scheme is elab¬ 
orated in Section [4] Finally, computational results are presented 
in Section[5] Concluding remarks are given in Section[6] 

2 Finite Field Trigonometrical Transforms 


sary to pave the way for subsequent definitions of the finite field 
trigonometrical transforms. 

Fet GF (p) be a Galois field with odd characteristic p. If 
p = 3 (mod 4), then it is possible to construct an extension 
field GF (p 2 ) using the solution of the irreducible polynomial 
^ + 1=00. In addition, this extension field is isomorphic 
to the Gaussian integer field GI(p) = {a + jb : a,b £ GF(/?)}, 
where j 2 = — 1 (mod /?). Furthermore, compared to the usual 
complex numbers, the Gaussian integers enjoy similar arithmetic 
operation rules. 

For a given element £ £ G\(p) with multiplicative order A, the 
trigonometrical cosine and sine functions are defined by mm 


,, A r + C~' 

cos (i) = 2 , 

*=0,1,. 

■ - ,7V — 1, 

(3) 

n - r-i 
sin(i) A , 

1 = 0,1,.. 

■ j TV — 1, 

(4) 

2 J 


respectively. Remarkably, for each £ in GF/?), the trigonometri¬ 
cal functions define a different mapping. Moreover, unlike their 
real field counterparts, the finite field cosine and sine can assume 
complex values, since £ is a Gaussian integer. 

The following definition and lemma provide means to circum¬ 
vent the need of complex arithmetic. 

Definition 1 (Unimodularity (13)) An element a + jb £ GI (p) 

is unimodular if a 2 +b 2 = 1 (mod p). □ 

In other words, unimodular elements have unitary Gaussian in¬ 
teger norm, denoted by n(a + jb) = a 2 +b 2 (mod p) (36). 

Besides, if £ has unitary norm, then the computation of 
trigonometrical functions are simplified, as it is shown in the fol¬ 
lowing lemma. Let the real and the imaginary parts of a Gaussian 
integer a + jb, where a,b £ GF(/?), be denoted by 9?( a + jb) = a 
and 3 (a + jb) = b, respectively. 

Lemma 1 (Real Cosine and Sine (2) If C £ GI(/?) is unimodu¬ 
lar with multiplicative order N, then cos(i) = 91(0 an d sin(f) = 

3(C'),*' = 0,1,...,A—1. 

Proof: Manipulating the cosine function expression (Equation^ 
yields 


c'+r 1 

2 

(5) 

cxcr 1 

2 

(6) 


Let = a + jb, where a.b £ GF(/?). Then, by usual arithmetical 
operations, the inverse of tj l is given by 


In a series of papers Go) [91 132] HD ESI by Campello de Souza 
and collaborators, a trigonometry over finite fields was derived. 
Equipped with such trigonometrical tools, it is possible to de¬ 
fine finite field transforms other than Pollard’s Fourier transform 
over finite fields El- In particular, the finite field trigonometry 
successfully offers a formalism to encompass the finite field co¬ 
sine transform and the finite field Hartley transform. 

In this section, the theory of finite field trigonometry is briefly 
discussed and its major properties are emphasized. This is neces¬ 


, w r t = a~ jb = a~ jb 
a 2 +b 2 «(£’) 


(7) 


On account of the fact that n(-) has a multiplicative property (36) . 
«(£') = [«(C)] ! = 1- Thus, the inverse of Cf is equal to its com¬ 
plex conjugate a — jb. Therefore, it yields 


= (°+.w+(°-.w 
v ’ 2 
= « = 9t(C)- 


( 8 ) 

(9) 
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A comparable derivation can be obtained for the sine function. 

□ 

This result is of paramount importance. Once a unimodular el¬ 
ement £ is chosen, any arithmetic manipulation involving finite 
field cosine or sine functions results in quantities defined over the 
ground field GF(p). Therefore, the unimodularity of £ is a suffi¬ 
cient condition for the definition of number theoretic transforms 
that utilize the finite field cosine or sine. Under this condition, 
two consequences are accomplished: (i) the finite field trigono¬ 
metrical functions induce no complex arithmetic operations and 
(ii) all related computations are performed by means of modular 
integer arithmetic. In terms of computational implementation, 
these two properties are significant. 

2.1 Finite Field Cosine Transform 

Early investigations on the finite field discrete cosine transform 
were reported in j22|. Independently, an extended study of the 
FFCT, based on the finite field trigonometry, was introduced 
in 0. A comprehensive derivation and detailed proofs of related 
FFCT theorems are described in 0. 

Generally, the FFCT is a transformation that provides a spec¬ 
trum that is not in GF(/?), thereby exhibiting a complex nature. 
Nevertheless, for carefully selected unimodular £ values, it is 
possible to ensure that the FFCT spectrum assumes purely real 
quantities. Consequently, the FFCT becomes an NTT. In the 
present study, only the NTT case is of interest. The following 
simplified presentation of the FFCT is formulated to guarantee a 
real spectrum. 

Definition 2 (FFCT rf9ll22lll For a given unimodular element 
£ £ GI(p) with multiplicative order 4N, the FFCT maps an N- 
dimensional vector with elements V; £ GF(p), i = 0,1, ,1V — 
1, into another vector with components V k £ GF(p), k = 
0,1,... ,2V — 1 according to 

N -1 

v*= £2v/cos((2i+l)*), GO) 

<=o 

for k = 0,1,... ,N — 1. □ 

An inversion formula can be derived and is given by the follow¬ 
ing expression lf9l [22l : 

1 IV-1 

v;= ——i -L a k V k cos ({ 2 i + l ) k ), (11) 

N (mod p) 

for i = 0,1,..., N — 1. The auxiliary sequence a is defined by 

2~ l (mod p), if i = 0, 

1, otherwise, 

for i = 0,1,... , N — 1. 

Table [ljbrings a list of adequate unimodular £ elements to be 
used in the definition of cosine and sine functions in order to 
make the FFCT act as an NTT. 


Table 1: Suitable values of £ and the associated transform block- 
length N for the FFCT over several finite fields GF(p) 


p 

N 

? 

7 

2 

±2 ±2 j 

11 

3 

±3 ±5 j 

19 

5 

±4 ±2 j , ±3 ±7./ 


2 

±9 ±9j 

23 

3 

±8±1U 


6 

±10±47, ±4±10; 


2 

±4 ±47 

31 

4 

±13±77, ±7±137 


8 

±11±27,±10±57, ±5±107, ±2±lly 

43 

11 

±9±77, ±3± 117, ±13 ±27, ±8± 187, ±20± 17 j 


2 

±20 ±207 


3 

±6 ±237 

47 

4 

±22 ±97, ±9 ±227 


6 

±16± II7, ±11 ± I67 


12 

±19 ±47, ±4± 197, ±18 ± IO7, ±10± I87 


2 

±8 ±87 


4 

±24 ±21), ±21 ±24) 

12f] 

8 

±30 ±25), ±59 ±407 

16 

±29 ±77, ±41 ± 157, ±49 ± 34 j , ±60 ± 46 j , 
±67 ±46) 



32 

±22 ± 57, ±23 ±197, ±39 ± 2 j , ±2 ± 39 j , ±38 ± 

97, ±45 ±327 


"Selected £ values only. 


2.2 Two-dimensional FFCT 

As the kernel of FFCT is separable, it follows that the two- 
dimensional FFCT can be performed by successive calls of the 
one-dimensional FFCT applied to the rows of the image data; 
then to the columns of the resulting intermediate calculation. In¬ 
voking the Equation [lOj the two-dimensional finite field cosine 
transform can be synthesized in matrix form. Let C be the FFCT 
matrix, whose elements are given by 

c,-^ = 2cos ((2i+ l)k), i,k = 0 , l ,..., N — l . (13) 

The two-dimensional FFCT of an N x N image data D can be 
simply written as 

D = C D C r , (14) 

where the superscript T is the transposition operation. The ma¬ 
trix formulation for the inverse transformation can be obtained 
in a similar way: 

D = C' 1 'D-(C^ 1 ) r , (15) 

where, according to Equation [IT] the elements of C 1 are given 

by 

c[ k = — —(rnocTp) a<: cos ((2; + 1 )k ), i,* = 0,1,... ,2V— 1, 

(16) 

and the quantities a k are defined in Equation [l2| 

2.3 Finite Field Hartley Transform 

Introduced independently in mm, the definition of the FFHT 
resembles the formalism of the conventional discrete Hartley 
transform (DHT) El. 

Definition 3 (FFHT EH) For a given £ £ GI(p) with multi¬ 
plicative order N, the FFFIT relates two N-dimensional vectors 


3 

















y and V, according to the following expression 
N -1 

V*=£v f cas(i*), A: = 0,1,. ..,N— 1, (17) 

i=0 

where 


cas (i) = cos(i) + sin(i) 


(18) 


( 1 -7)C i + (l+j)r i 

2 

is the finite field version of the Hartley function /EZK- 

Consonant with the DHT theory, apart from the scaling factor 
/V 1 (mod /;), the FFHT is a symmetrical transformation and its 
inversion formula is given by Quo nina 

1 N -1 

Vi = Tt— 7 —-t-^r E V k cas(ik), i = 0,l,...,N-l. (20) 

iV (mod p) 

Similar to the FFCT, the FFHT can exhibit a complex spec¬ 
trum. Nevertheless, a judicious choice of £ can effectively pre¬ 
vent this behavior, making the components of the finite field 
Hartley spectrum to be real. Again, unimodular elements are 
taken into consideration. Table [5] lists some unimodular C ele¬ 
ments for several fields, and the associated FFHT blocklength. 

The FFHT can be written in terms of matrices. Let H be the 
finite field Hartley matrix, whose elements hn are given by 

hiy = cas(;T). i,k = 0, 1. (21) 

Consequently, the forward and inverse FFHT are expressed by 


V = H • v, 

(22) 

v = } H ■ V, 

N (mod p) 

(23) 


respectively. 


(19) 

□ 


2.4 Two-dimensional FFHT 

Since the FFHT lacks a separable kernel, the two-dimensional 
FFHT cannot be performed by successive calls of the one¬ 
dimensional FFHT applied to the rows of an image data; and 
then to its columns l37l . In fact, the procedure for the calcu¬ 
lation of the 2-D FFHT is analogous to the one utilized for the 
computation of the 2-D DHT lf37l . Initially, a temporary matrix 
T is computed, which is given by 

T = H D H, (24) 


Table 2: Suitable values of £ and the associated transform block- 
length N for the FFHT over several finite fields GF ( p ) 


P 

N 

c 


2 

2 


4 

h 27 


2 

6 

7 

4 

8 

±j 

±2 ±2 j 


2 

10 


3 

5±3 j 

11 

4 

6 

12 

±j 

6±3 j 
±3 ±5.7 


2 

18 

19 

4 

5 

10 

±2 

2±4;,7±3y 

12± 3 j , 17±4 j 


20 

±3±7j,±4±2 j 


2 

22 


3 

H±8y 

23 

4 

6 

±7 

12±8y 


8 

12 

±9±9y 
±8 ±1U 


24 

± 4 ± 10 j , ±10±4 j 


2 

30 

31 

4 

8 

±i 

±4 ±41 


16 

±7± 13 j , ±13 ±7 j 


32 

±2± 11 j , ±5± I 0 j ,±\ 0 ± 5 j , ±11 ±2 j 


2 

42 

43 

4 

11 

22 

44 

±7 

2±13y,7±9y, ll±3y, 18±8y, 26±20y 

17± 20y, 25±8 j , 32±336±9y, 41 ± 13; 

3 ± 117, ±8 ± 18 j , ±9±7y, ±13±2y, ±20 ± 17 j , 
40± 11 j 


2 

46 


3 

23 ±61 


4 

6 

±1 

24 ±61 

47 

8 

20 ± 20 j 


12 

16 

24 

6±23 j 

±22 ±9/', ±9 ±22/ 

±16± lly 


48 

± 19±4y, ±4± 19y, ±18± 10;', ±10± 187 


2 

126 


4 

8 

±1 

±8 ±81 

12-0 

16 

±24 ± 21y, ±21 ± 24 j 

32 

±30 ± 25 j , ±59 ± 40 j 


64 

±29 ± lj , ±41 ± 15 j , ±49 ± 34 j , ±60 ± 46 j , 
±67 ±46 j 


128 

±22 ± 5 j , ±23 ±197, ±39 ± 27, ±38 ± 97, ±45 ± 
327 


where D is an N x N image and H is the finite field Hartley trans- "Selected £ values only 
form matrix. 

Subsequently, the two-dimensional FFHT of D is expressed 
by 

D = ^ (T + T (c) + T ,r) - T (c ’ r) ) , (25) 


where T (c \ T (r) , and T (c ’ r) are built from the temporary ma¬ 
trix T. Their elements are respectively given by t i N _j ( mo dv)> 
fv i (mod N ). j ' dnd t,Y - 1 (mod N ). N—j (mod jv)> wheie tjj ate the ele¬ 
ments of T, for i,j = 0,... ,1V— 1. 


4 


















2.5 Revisiting the FFFT 


3.2 Watermark Extraction 


In the light of the finite field trigonometry, the classic finite field 
Fourier transform (3j can be re-examined. Mimicking the defini¬ 
tion of the standard discrete Fourier transform, one may consider 
a Fourier-like finite field transform equipped with a kernel given 
by cos(i) + ysin(;), i £ GF(/?). This kernel suggests the follow¬ 
ing expression 


IV -1 


E* 

(=0 

(cos (ik) + jsin(ik)) 

(26) 

N-l 

L v ‘ 

i =0 

+ 

1 

1 

^1 

(27) 

V 2 ' J 2 j J 

N-l 

E* 

i =0 

1 

S: 

o' 

II 

V-P 

(28) 


Because £ is an element of GI(p) = GF(/7 2 ), the above deriva¬ 
tion is a simplified construction of Pollard’s FFFT 0. The orig¬ 
inal FFFT definition considers a more general field, GF(</'"), 
where q = p' and m. r are positive integers l38l , Observe that the 
Fourier kernel degenerates the finite field trigonometrical func¬ 
tions into the powers of £. Therefore, if ‘Q £ GF(/?), then the 
FFFT can always act as an NTT. Otherwise, if £ £ GI(/?), then a 
possibly complex spectrum can be obtained M- The inversion 
formula is given by 


1 


N-l 


Vi = 


E^c 


-ik 


N (mod p) £5 
A proof of the inversion formula can be found in 


i = 0,1,... ,N— 1. (29) 


3 Fragile Watermarking over Finite Fields 


In this section, a generalization of the Tamori-Aoki-Yamamoto 
methodology is presented. In this derivation, instead of using 
the Fourier-based NTT, as suggested in li25l . a general number 
theoretic transform is employed. 


3.1 Watermark Embedding 

Let D be an image data to be watermarked. By means of mod¬ 
ular arithmetic with respect to p , the image data can furnish its 
residue part Dr. Therefore, D can be written as 

D = Dr + D m , (30) 

where I)r = D (mod p) and D m is an image containing elements 
that are multiples of p. 

The method consists of the insertion of a watermark image W 
into the NTT spectrum of the residue of D. Let Dr be the 
2-D NTT of Dr. Consequently, it follows that 

Dr = Dr + W (mod/7), (31) 

where I) A is the watermarked spectral contents of Dr. Perform¬ 
ing the inverse 2-D NTT on I> A results in a watermarked spatial 
domain image D A associated to the residue of the host image. 

In view of that, the resulting final watermarked image D' can 
be derived as follows 

D=D^ + D m . (32) 


The inverse operation, watermarking extraction, can be imple¬ 
mented in a similar way. First, one may compute the modular 
residue of the original and the watermarked images: 

Dr = D (mod/7), (33) 

D a =D' (mod p). (34) 

Both resulting residue images are submitted to an NTT appli¬ 
cation. Afterwards, the watermark can be recovered from the 
difference of the obtained NTT spectra: 

W = D^-Dr (mod/7), (35) 

where D A and Dr are the number theoretic transform of I)' A and 
Dr, respectively. 

3.3 Private Watermarking Operation 

The above described watermarking scheme is intended to be uti¬ 
lized as a private watermarking technique for tampering detec¬ 
tion and location, in which the receiver must have the original 
image li25l . This is often the case in which the authority who 
marks the data is also the interested party in verifying its in¬ 
tegrity (26) . Therefore, an original image D is watermarked to 
provide another image D\ which is transmitted. The genuineness 
of D' is confirmed when extracting an unaltered watermark. 

Equation [32] reveals that, to produce watermarked images that 
are perceptually transparent, the dynamic range of the elements 
of D' a must not be excessively large. Otherwise, watermarked 
images can present significant distortions. To illustrate this be¬ 
havior, the originally proposed scheme was employed to em¬ 
bed a given watermark (Figure [T] b)) into standard Lena por¬ 
trait (Figure [T] a)) using two finite fields of different character¬ 
istics: GF(13) and GF(73). The obtained watermarked images 
are shown in Figure [TJc-d), respectively. The calculation over 
GF(73) furnished an image whose degradation is visually per¬ 
ceptible. 

Indeed, the described experiment qualitatively demonstrates a 
limitation in Tamori-Aoki-Yamamoto scheme. Because visually 
transparent watermarked images are not always achievable, the 
choice of finite fields becomes restricted to small values of p. 

4 A Signature System 

Apart from the private watermarking mode of operating, the de¬ 
scribed scheme can be interpreted from a different, new perspec¬ 
tive. The present study proposes that the same system can be 
also considered as a method for signature data generation. 

The watermark embedding process is now understood as a sig¬ 
nature generation operation. The output signature S is simply 
defined as 

S = D', (36) 

where the image D' is obtained according to Equation [32] Once 
obtained, the signature data can be made publicly available. 

In this context, the original watermark extraction method be¬ 
comes an authentication operation performed on raw data D. The 
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(a) 512x512 



(b) 64 x 64 



(c) 512x512 (d) 512x512 


Figure 1: Private Watermarking using the FFFT. (a) Original im¬ 
age, (b) watermark, (c) watermarked image in GF(13), (d) wa¬ 
termarked image in GF(73). 


input data to be verified is D, which is owned by the user. There¬ 
fore, the associated signature data, which can be retrieved from 
a trusted source, and the raw image can be submitted to the dis¬ 
cussed method. An unaltered extracted watermark is an evidence 
of the integrity and authenticity of D. In the case of a tampering 
attack, either on D or on S, the extracted watermark can indicate 
the data corruption location. 

It is worthwhile to emphasize that the aim is not to produce 
perceptually transparent watermarked images. Therefore, this 
approach completely diminishes the sensitivity to the value of the 
field characteristic, as experienced in the original methodology. 

Again because the NTT transform domain lacks a physical 
meaning, even an alteration in the least significant bit of a signal 
can render a totally different NTT spectrum. This is a desirable 
property. No matter how subtle, tampering can produce strik¬ 
ingly noticeable differences in the recovered watermark. Con¬ 
sequently, this approach can verify the authenticity and integrity 
of raw digital data, providing means to spatially locate alteration 
regions. 


5 Computational Results and Discussion 

In this section, some computational experiments are performed 
to validate the proposed methods. Selected standard images 
available at the University of Southern California Signal and Im¬ 
age Processing Institute (USC-SIPI) Image Database ll39l were 
submitted to the suggested watermarking scheme. Private water¬ 
marking and signature generation functionalities of the method 
were explored, with the application of the two-dimensional finite 
field cosine and Hartley transforms. 

Generally the dimensions of a practical number theoretic 



Figure 2: A blockwise two-dimensional transform application. 
The size of the the dashed blocks matches the two-dimensional 
transform blocksize N xN. 


transformation matrix N x N are smaller than usual image sizes. 
Typical values of the transform size N are given in Table[l]and[2] 
Therefore, the required two-dimensional transforms are obtained 
conforming to a blockwise computation. This approach simply 
consists of decomposing a given host image into adjacent, equal 
sized, nonoverlapping blocks. These constituent blocks must 
match the dimensions of the considered two-dimensional trans¬ 
formation matrix. After that, each block is transformed and the 
resulting 2-D spectral blocks are reassembled, which results in 
a blockwise transformed image. Figure [2] illustrates the process. 
Accordingly, the discussed watermarking schemes are applied 
blockwise as well. 

Considering the FFCT, a raw image (Figure [3ja)) was pro¬ 
cessed and furnished the watermarked data displayed in Fig¬ 
ure |3jc). Figure [3jd) shows the original image after the intro¬ 
duction of random artifacts on its pixel values. The modification 
consisted of incrementing the image pixels by one with proba¬ 
bility 10 2 . A wavy pattern was selected as the watermark (Fig¬ 
ure [sj'bjj and an FFCT over GF(7) with blocksize of two was 
chosen. Over GF(7), a possible choice is £ = 2 + 2 j, which in¬ 
duces an NTT of length equal to 2. This small blocksize was able 
to sharply indicate tampering locations ("Figure [3je)). 

Similar results were obtained with the aid of the FFHT. Using 
an 8-point 2-D FFHT over GF(31) (C, =4 + 4 j), a modification 
introduced into a raw image (Figure [4ja)) could be detected and 
assessed. Differently from the previous experiment, a smaller 
watermark was utilized (Figure |4] b)). After the calculations, the 
recovered watermark image (Figure |4je)) clearly discloses the 
tampering and shows the interfered regions. Actually, the use 
of a small transform blocklength made possible to provide infor¬ 
mation on the nature of the modification. In this case, a small 
text had been written on the original image. If a larger transform 
were employed, this capability would be reduced, because the 
recovered watermark would present the tampered areas in larger 
blocks. Ultimately the accuracy of the tampering location would 
be mitigated. 

Figures [5] and [6] illustrate the signature operation proposed in 
the current work. An original image (Figure [5ja)) was processed 
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with the inclusion of a watermark (Figure [5] b)). Consequently, 
the signature image data depicted in Figure [5jc) was obtained. 
Being the calculations over GF(127), a visually low-quality im¬ 
age was attained. However, this is not important, because the 
Figure [5jc) is only intended to be used as signature data. Only 
its mathematical properties are relevant. A tampering consisting 
of incrementing a single pixel at position (100,100) was applied 
to the original image, and Figure [5jd) was derived. The output 
of the authentication system is shown in Figure [5|e). As the cho¬ 
sen £ for this calculations was 2 + 39 j, the transform blocksize 
was 32. Therefore, the precision of tampering positioning is re¬ 
stricted to 32 x 32 pixel regions. 

For an improved tampering location accuracy, one may con¬ 
sider shorter transforms, as in the experiment depicted in Fig¬ 
ure [6j After signature generation in GF(251) using the FFHT 
with £ = j (Figure [6fc)), the host data (Figure [hja)) was ma¬ 
liciously tampered. Figure [6jd) shows that a forged image is 
introduced. This specific £ implies a 4-point transform, which 
provides a potentially adequate tampering location accuracy. The 
recovered watermark clearly discriminates the modification site 
(Figure [6fe)). 

Given a fixed subject image (Lena portrait), water¬ 
marked/signature images were generated via the method dis¬ 
cussed herein, for all possible finite fields with characteristic 
ranging from 3 to 251. Both FFCT and FFHT were considered 
and £ was chosen in such a way that 4-point 2-D transforma¬ 
tions were guaranteed. Subsequently, the peak signal-to-noise 
ratio (PSNR) was adopted as a measure of the image deterio¬ 
ration after the watermarking process. For small values of p, 
visually imperceptible watermarks can be produced, since the 
resulting images present high PSNR values. However, for large 
values of p, the image quality becomes unacceptable for invis¬ 
ible watermarking purposes. Despite of that, for signature data 
generation, obtaining low PSNR values becomes less relevant. 
Quantitative data concerning the image degradation are summa¬ 
rized in Figure [7] 
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(a) 512x512 (b) 512x512 (c) 512x512 



(d) 512x512 (e) 512x512 


Figure 3: Private watermarking using the FFCT. (a) Original im¬ 
age elaine. 512. tiff (Elaine), (b) watermark (negative image 
for better visualization), (c) watermarked image, (d) tampered 
image with a Bernoulli distributed noise of 10 2 error proba¬ 
bility, (e) extracted watermark with clear location of tampering 
(negative image for better visualization). Calculations were per¬ 
formed over GF(7) with £ =2 + 2 j, transform size is 2. 



(a) 256 x 256 


(b) 64 x 64 (c) 256 x 256 


The utilization of finite fields as an avenue for fragile watermark¬ 
ing was explored. The watermarking scheme suggested in (25l 
was amplified and generalized by the introduction of finite field 
trigonometrical transforms, such as the finite field cosine and 
Hartley transforms. The new proposed methodology generates 
signature data that can provide image authentication as well as 
tampering location capability. 
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